[Bro] Extract files not authentic copy of file

[Ambros Novak]

Hello,

The configuration is extracting certain file types but the files that are extracted are not authentic replications of the files in the stream. The hashes do no match the real files at the user’s endpoint. Upon inspecting the extracted files there seems to be mismatched and duplicated streams. 

How can this be corrected? I would like the extracted files to be exactly what the user would download. 

Thank you kindly for your help. 

Ambros

——